samuel-emrys-blogs / freebsd-nextcloud-setup-hardened Goto Github PK

**I-PRESS-ENTER**

$ iocage exec nextcloud mkdir data
I followed all the steps above in Freenas 11.3, with nextcloud-7.2. Once everything is setup, i could not log in using the webapp. This gives a 401 error when trying to grant access.

The apache server configuration was missing modwrite in other to pass the authentication through for the webdav basic auth. as per link: https://help.nextcloud.com/t/client-login-fails-with-401/29378/7

steps required:
nano /usr/local/etc/apache24/httpd.conf
find rewrite_module and uncomment the line: LoadModule rewrite_module libexec/apache24/mod_rewrite.so

return to modify your virtual host file
cd /usr/local/etc/apache24/Includes
Add the following lines into the virtual hosts, it should look something like this (note, i’ve changed my php-fpm to use a socket):

<VirtualHost *:80>
DocumentRoot "/usr/local/www/nextcloud"
ServerName IP
<FilesMatch \.php$>
SetHandler "proxy:unix:/var/run/php-fpm.sock|fcgi://localhost/"
</FilesMatch>
DirectoryIndex /index.php index.php

RewriteEngine On
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]
</VirtualHost>

Boom, the web-app should work and you’ll be able to log in from the application. From reading over the comment thread, the basic authentication is not being passed through, leading to a 401 error.

*/5 * * * * /usr/local/bin/php -f /usr/local/www/nextcloud/cron.php

I’d like to document the process I’ve used to upgrade in place php72 to php74. For reference my FreeNAS installation runs 11.3-U2-1. My iocage jails had been updated to an 11.3 base. The pkg repo was updated to the latest release and not the quarterly release (this step was documented above)

Preparation

– Make sure you create a snapshot of the iocage nextcloud jail and a snapshot of the datasets used by nextcloud (ie jailhouse tree) in case something goes wrong
– Additionally save a copy of /usr/local/www/nextcloud/config/config.php in case something goes wrong
– Put nextcloud in maintanence mode: sudo -u www php occ maintenance:mode –on

Pkg Install

– sudo pkg install nextcloud-php74-18.0.3
You’ll be presented with a list of all the conflicting files between 7.2 and 7.4. Make a note of what php files are not included in the 7.4 list that are included in the 7.2 list. You’ll need to manually install these.

I let the installation complete
I then had to manually install the following files (this was based on the step above):
sudo pkg install php74-pcntl php74-pecl-imagick php74-pecl-redis php74-phar php74-tokenizer

The only package that didn’t have a match was php72_wddx. There was no corresponding php74 version

Change ownership of the /usr/local/www/nextcloud directory
sudo chown -R www:www /usr/local/www/nextcloud
Take nextcloud out of maintainence mode
sudo -u www php occ maintenance:mode –off
Potential problems – Complete step only if this problem occurs to you
Prior to upgrading I was running nextcloud php72-18.0.4.2 and this process install php74-18.0.3.0. On accessing either nextcloud through the browser or through a sudo -u www php occ status — I was receiving error: Downgrading is not supported and is likely to cause unpredictable issues (The installation downgraded my 18.0.4.2 version to 18.0.3.0)

For a workaround —
As root – edit /usr/local/etc/nextcloud/config/config.php and look for version line — change the line to look like the follwoing:
‘version’ => ‘18.0.3.0’,

Perform a manual upgrade on command line:
sudo -u www php occ upgrade

The above command should restore to the latest nextcloud version.

Verify php7.4 is now being used (Optional)

– At command line: php –version
— From browser – create an info.php file and place it inside your nextcloud root directory (/usr/local/www/nextcloud)
The contents of info.php are:

Browse to your nextloud domain –> For example nextcloud.example.com/info.php. This should display the php version as well.

'trusted_proxies' => 
array (
  0 => 'REVERSE_PROXY_IP',
),

max_execution_time = 300
max_input_time = 300

$ su -m www -c 'php /usr/local/www/nextcloud/occ config:system:set memcache.locking --value="\OC\Memcache\Redis"'

samuel-emrys-blogs / freebsd-nextcloud-setup-hardened Goto Github PK

freebsd-nextcloud-setup-hardened's Issues

The first one will only work if you have a /usr/local/bin/perl, the second will work as long as perl is in PATH.

-- The Apache Portable Runtime project removed support for FreeTDS with version 1.6. Users requiring MS-SQL connectivity must migrate configurations to use the added ODBC driver and FreeTDS' ODBC features.

Don't forget to add -pthread to your linker options when linking your code.

This port does NOT include the mytop perl script, this is included in the MariaDB tarball but the most recent version can be found in the databases/mytop port

-- Find the Galera Cluster documentation at http://galeracluster.com/documentation-webpages/

This group is read both by the client and the server

use it for options that affect everything, see

include *.cnf from the config directory

Recommend Projects

Recommend Topics

Recommend Org

Jobs

The first one will only work if you have a /usr/local/bin/perl,
the second will work as long as perl is in PATH.

--
The Apache Portable Runtime project removed support for FreeTDS with
version 1.6. Users requiring MS-SQL connectivity must migrate
configurations to use the added ODBC driver and FreeTDS' ODBC features.

Don't forget to add -pthread to your linker options when
linking your code.

This port does NOT include the mytop perl script, this is included in
the MariaDB tarball but the most recent version can be found in the
databases/mytop port

--
Find the Galera Cluster documentation at
http://galeracluster.com/documentation-webpages/